This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json) Hash identifier: V1U9sSiM9aRSsyj+ZOkeHQBBW8z3Q8/MBs6Il/tdHk8= Subject key identifier: 20:A2:44:2E:A5:72:2E:1F:5E:C6:21:26:C9:09:FA:BE:8D:34:44:F0 Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d Certificate serial: 019B4A02B0CB438AB8535CFD38E32561B2F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 07:00:48 +0000 Manifest this update: Tue 23 Dec 2025 07:00:48 +0000 Manifest next update: Wed 24 Dec 2025 07:00:48 +0000 Files and hashes: 1: JjOh7wV3uoOnT6pZLsppbv_LAZ8.roa (hash: QPSPPNn3Qn++fdP63nXuDi3yMhHz0vKFIROySBvf1mk=) 2: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: X5da272qN5woDSp1qDbb2eOFDRMZ5qi0uGW8GJMSogA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:b0:cb:43:8a:b8:53:5c:fd:38:e3:25:61:b2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d Validity Not Before: Dec 23 07:00:48 2025 GMT Not After : Dec 24 07:00:48 2025 GMT Subject: CN=20a2442ea5722e1f5ec62126c909fabe8d3444f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:d1:b0:01:e3:a6:86:07:6a:c6:e1:bb:c7: ac:17:b2:9a:38:a5:58:4d:69:05:03:ae:b2:05:cb: 45:4e:16:a7:3f:72:00:59:40:72:b2:89:2b:e3:6e: 9c:4a:a8:74:4d:9e:f6:83:23:fd:00:9e:ea:ee:b8: 6b:8c:a4:f7:0c:01:c1:00:a5:51:e1:b5:f3:80:8f: bc:45:42:95:53:30:18:d0:0c:3c:1c:ab:24:fe:bf: 13:06:66:c3:75:8d:77:37:08:22:ed:e3:f7:b4:20: 09:aa:53:3b:ad:4c:80:07:ae:3f:4f:07:be:50:03: fb:ca:77:6d:b9:20:58:12:8a:dd:b2:be:bf:67:af: d0:bb:4d:32:c6:d0:1c:ef:81:de:0f:b6:28:c5:39: b2:f3:8a:90:97:3d:ae:ad:58:96:0b:8a:1a:8f:f9: da:23:35:93:37:ba:b3:13:90:18:8b:c1:95:25:61: 81:13:2f:ca:ad:60:0c:66:04:ba:36:33:ef:af:b0: f8:43:cc:e1:5c:22:1a:b9:b7:a2:df:dc:ce:e6:6a: 5e:fb:53:4d:77:74:20:f2:68:c3:34:3b:6f:e3:64: 50:af:ee:1d:f9:fb:05:fa:0b:23:ca:6b:22:bc:86: 3c:0c:65:24:28:fe:fd:b7:51:76:55:fe:bf:86:dc: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A2:44:2E:A5:72:2E:1F:5E:C6:21:26:C9:09:FA:BE:8D:34:44:F0 X509v3 Authority Key Identifier: keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:29:11:33:38:54:5f:7d:b8:cf:4f:85:a7:63:aa:12:0f: 2d:4f:eb:c9:5f:b5:f1:b5:3c:f5:03:1e:ce:78:64:88:f7:5f: cb:bc:15:18:54:e5:69:43:d6:e5:d7:ce:b0:0f:9b:1b:50:0c: 4f:a3:66:32:b7:40:ea:2c:09:53:25:8a:1b:9b:b0:bb:c4:e6: 94:1f:d9:36:d0:04:d8:08:91:de:86:67:ef:0a:ac:c3:a3:e6: 7f:2e:3c:86:e5:f6:06:7c:d7:86:53:70:c9:d2:11:f8:69:25: aa:58:0e:24:b9:07:1b:e3:15:09:ee:50:9b:52:f4:47:77:7f: 7f:4f:0a:0b:be:e7:7a:d2:6b:4b:04:ec:27:6c:31:c0:f7:d5: 7d:6d:56:be:80:49:75:f0:77:e3:55:55:e4:4a:f0:06:1a:f3: 28:bf:c3:3b:9f:01:9d:2f:a0:df:86:1a:18:c0:b1:bf:9f:d8: 6a:6b:f2:60:c3:78:c3:20:8d:14:ec:c3:50:1c:b7:7b:a4:11: 71:d3:46:71:3d:9c:c7:5f:63:c7:63:16:ac:dd:fe:2c:a4:71: 80:f5:3b:0a:e7:fc:47:e3:96:7c:e5:c2:c3:0a:bd:1e:c0:07: fa:a4:5c:4f:20:08:69:43:2a:22:9f:4e:e8:c2:b2:3f:65:5d: 81:43:0e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKArDLQ4q4U1z9OOMlYbLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyY2MxNzFlM2RjODQ2NzExZTA1NmUyZTM2MjQxZGFjOTk0 YTYwMGQwHhcNMjUxMjIzMDcwMDQ4WhcNMjUxMjI0MDcwMDQ4WjAzMTEwLwYDVQQD EygyMGEyNDQyZWE1NzIyZTFmNWVjNjIxMjZjOTA5ZmFiZThkMzQ0NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pvRsAHjpoYHasbhu8esF7KaOKVY TWkFA66yBctFThanP3IAWUBysokr426cSqh0TZ72gyP9AJ7q7rhrjKT3DAHBAKVR 4bXzgI+8RUKVUzAY0Aw8HKsk/r8TBmbDdY13Nwgi7eP3tCAJqlM7rUyAB64/Twe+ UAP7yndtuSBYEordsr6/Z6/Qu00yxtAc74HeD7YoxTmy84qQlz2urViWC4oaj/na IzWTN7qzE5AYi8GVJWGBEy/KrWAMZgS6NjPvr7D4Q8zhXCIaubei39zO5mpe+1NN d3Qg8mjDNDtv42RQr+4d+fsF+gsjymsivIY8DGUkKP79t1F2Vf6/htwX9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCiRC6lci4fXsYhJskJ+r6NNETwMB8GA1UdIwQY MBaAFILMFx49yEZxHgVuLjYkHayZSmANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYt ZWZkM2FlOTg1ZWU0LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYtZWZkM2FlOTg1ZWU0 LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeopETM4 VF99uM9PhadjqhIPLU/ryV+18bU89QMeznhkiPdfy7wVGFTlaUPW5dfOsA+bG1AM T6NmMrdA6iwJUyWKG5uwu8TmlB/ZNtAE2AiR3oZn7wqsw6Pmfy48huX2BnzXhlNw ydIR+GklqlgOJLkHG+MVCe5Qm1L0R3d/f08KC77netJrSwTsJ2wxwPfVfW1WvoBJ dfB341VV5ErwBhrzKL/DO58BnS+g34YaGMCxv5/YamvyYMN4wyCNFOzDUBy3e6QR cdNGcT2cx19jx2MWrN3+LKRxgPU7Cuf8R+OWfOXCwwq9HsAH+qRcTyAIaUMqIp9O 6MKyP2VdgUMOJw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:48:16 2025 by rpki-client